ZDI-26-267: Malwarebytes Anti-Malware Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Malwarebytes Anti-Malware. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8.

• zerodayinitiative.com/advisories/ZDI-26-267/ (opens in a new tab)

• ZDI-26-834: Linux Kernel IPv6 AH Routing Header Integer Underflow Local Privilege Escalation VulnerabilityHighVulnerability2026-10-29
• ZDI-26-835: Linux Kernel Logitech HIDPP Protocol Use-After-Free Local Privilege Escalation VulnerabilityHighVulnerability2026-10-29
• ZDI-26-837: Linux Kernel XFRM Subsystem Use-After-Free Local Privilege Escalation VulnerabilityHighVulnerability2026-10-29
• ZDI-26-838: FreeBSD Kernel TTY Race Condition Local Privilege Escalation VulnerabilityHighVulnerability2026-10-29
• ZDI-26-832: AVG Internet Security avgToolsSvc Link Following Local Privilege Escalation VulnerabilityHighVulnerability2026-10-28